
SSN's i i 5 > stherre sons Best K 

\i sxate project pto Os^K" c SSbVi SoNaafs 


o Mod odd x ,rom 1 users \ o a look-up table. or only avaduhle to cc» 
users). Describe: 



Explain: DCS-HQ is a document scanning The collection of socml security 
n < nvx that m,e be contained \ the documents scanned \w .bread x been 
deemed necessary to carry out the pare coke function. DCS does no$ rum met a 
copy of the document scanned once the mmmng process is complete. 


Is the system operated by 3 contractor 
No. 


\ x ' m u m e s \\ s. o s' v >0 th N <0 oe 
o n do s\ P ha\' \c sx^ensot coords i ,mooo< Xpqmrr, m Nm % 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PII and additional requirements .may he 
imposed as a matter of Department of Justice policy. Consultations noth me 
Office of tire General Counsel may be required if a contractor is operating the 
system for the FBI. 

last system undergone Cert cut ton A \ecwbmi 5 t\y \ i|| v Bt 
Security Division (SecB}' ; 

mx .NO if no. Indicate reason: if €&A is pending, provide anticipated 

completion date; 

•> x o \ \ utpauj lu. ip m 

.YES If yes, please indicate the following;, if known; 

Provide date of last OLA eerflfleaiioo/re-cerfitlentbn; 


Cnotid&ntiaiirx 

__Lnw_ 

_M ode rate 

JMffr . 

1.1 o defined 

Integrity: 

.Low 

Moderate 

.Htgfe.. 

1 Indefioed 

Avodahdlty:: 

Low 

Moderate 

.High.. 

Undefined 
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10. is this system/project the subject of an GMB-300 budget submission? 

.s HO 

Y E S 1 f y e$, piease p rov Ide i h e d a f e an d o a me o r 

title of the 0MB .submission; 

11. Does the system conduct data miatag as defined in Scenes 804 of the 
fottplemenling Recommendations of the Hi I Commission Act of 2007, RL, ! 10- 
$5 (codified at 42 USC 2000ee-3}? 

.s NO 


YES if yes, please describe the data mining function: 

12 S - S V N V V v 

.x.NO .YES 

13. $ tutus o f S ys tend Pros eel : 

x ' v > ,.N\\-oe n i ' Cop, \ n\ 

STOP, The PTA Is now complete am! after divlskm approvalOt should be 
submitted to FBI OOC/POAJ for final FBI approval and determiaallon If 
PI.A ami/or other actions are mpimij 

lb EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 


2. Has the system/project undergone aay sigaifleam changes since April 17, 2003? 
\ ' m - 


YES » v "■ * ' o^ , , ui b T 

changes that apply, and provide brief explanation for each marked change): 

A conversion from paper-based records to so electronic system, 
idemiliable to a format that Is identifiable to particular individuals, 
technology, that changes how information in identifiable form is managed. 


I' o e I ns s 111 ed 
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(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did no?, exist.) 

A change that results in information in identifiable form being 
mergi.nl ceomaliaed. or matched with other databases. 

A new method of authenticating the use of end access to 
erformation m identifiable form by members of the public. 

A systematic incorporation of databases of information in 
identifiable form purchased or obtained from commercial or public sources 

A note interagency use or shared agency function that results m 
new uses or exchanges of in formation in identifiable form. 

identifiable form. 

form being added into foe system/project. 

.x. Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of in format am from the system, project. 

Oth er | P rovl d e brie f e x p la nation j i 

.x.NO .YES 

if yea; 

a. Provide date/?! tie of the PI A: 

b. Bas rite system, project undergone any significant changes since the Pi A? 

.NO .Yts 

[The FT A is now complete and after division approvalf sj should he submitted to 
FBI OGC/f CLiJ for final FBI approval and determination if PIA and/or other 
actions are required^ 


flodassified./f 
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HW * :i \i SOW rm\mMO\p- ih'v 

PO.AIFCLO Md/miny PI A sdnnixsknn I he PI A Frailer should rido n 


onapCtcd Oy Use hoi 
aa 4 continued 


„ PI A ; 
HA 1 


h.A.mve/nnKin .-• 


my RMD FOlA 


_ PI A lx see required ierrhe idiots Ins reasonCr 

X_ System does see?, collect me Fuel;';, or disseminate PH 

.%Aero is grand tads ted (irs existence betore 4/1 ACGO); no hoe; chanties / 

.IrAbrmation in the system relates to uuerral government operations. 

System hex been previously Assessed eider ;m evaluation stroba/ to a P:A. 

.No sdrelisare privacy issues per privacy issues ate onenrnm/Dh 

Other (describe): 


Anno,able yORNm 






schedule approved by /be National Archives and Records Adnndstration is necessary. RMD nun provide advice sit t; 
::.A..mNAL.ioN:/:/F. : ::NND'L):i. : .F:A..:NO./i..iA::L)iy!Ai:lMIM.A.lb:i J:e.bo:i r : RceoMkernma Ccrd neat ion and any necessary updates. 






Dav 

, 

i SnpoiUasn ...A 


...LD). 

Privacy and Civil Liberties 0Racer 

1 i/doe Signed: 

:i /4C -A '•AOO- 


.ss!raa)N»< 
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NO YES if ves. check at! that apply: 

SENT: s-e nT-poitara for Other reasons. IX-scnTa-: 

The syicenvprcijeo provides special protection to YsNs (e.g- SSNs are 
encrypted bidden boro all osers via a look'up table, or only available 10 oeaair- 
overs), Describe: 

SSMs. ir.xphott: 

sob: cot oil the infomtation? 

..NO [If no. proceed to qocsben ?.) 

YES 

.NO 
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s ' '> ; I1 h pjvyswso vsh sk'Oih-s h FO t so do do; 5 bopkoosss 

the oecooiry CormOpj 

YDS kkns Uy any forms, paper or oOeirossse, soed So repo vs? sued 
mbosooAoo iYosr, ?b„ Sot >nnjnses> omy • k 

Ds vissost; Sec D V? 

NO If soy OdksAc rck^ki; If C&A 0 peosiksp. provide ssoddpoted 
costs jtkfhst dole: 

n o' > * ! * ! ' \ \v'S t- >■ >- x s 


NO Do if; know YES si yes, piosss; provkle 

the <tm- m$ must or idle of r,h« 
0M8 stsItmsM.wnK 


This Is (i new oysOov yoyoD ht Awdopoens jlfy oo cheeked ihls block, 

" C X ? V £ vC l x i 

sssbrnmesl so F!M ON (". SkO.F IDs- ItnssI FBI epprovsd assd deiesitskoBkns If 
PI A v V x x p v 


i:l i \nsv: nhmtms hiojh ^ 






























(OGC/PCLil {Rev. 04/01/20!!) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 


NAME OF SYSTEM / PROJECT; Q 
BIKR FBI Unique Asset ID: N/A 


Derived From: 
Classified By: 
Reason: 
Declassify On: 


SYST EM/PROJECT P OC 
Name ] I 

Program Office: Platform Engineering 
Unit 

Division: Information Technology 
Engin eering Division 
Phone ! I 

Room Number: LS-401_ 


FBI QGC/PCLU POC 


Name 

Phone|_ 

Room Number: hq-7350 


b7E 


b6 

b7C 


FBI DIVISION INTERM EDIATE APPROVALS 


Program Manager (or other appropriate 
executive as Division determines)_ 


Signature! 
Date si gns! 
Name: 


Division Privacy 0fficer 


Program Division: 
Information 
Technology Services 
Division__ 


-■ ivTT 


i-L v 


FBI!IQ Division: 
Information 
Technology 
Engineering Division 


Title: Piattorm SijppOjt u'nit Acting Chief 


Signature! 
Date si an A 


Date si] 
Name: 
Title: I 
Chief 


X 


-rzzr 


Jattorm Engineering Unit Acting 


Signature 
Date signet 
Name] 
Title:! 


Signature: 

Date si gned: y/ajy / j 

Name: I T 

Title: ITB Privacy Officer 


After all division approvals, forward signed hard copy pins electronic, copy to FBI OGC/PCLU (JEH 7350). 

(The FBI Privacy and Civil Liberties Officer’s determinations, conditions, and/or final approval will be recorded on the 
following page.) 
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FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: [This section will be completed by the FBI 
PCLU/PC1.-0 following PTA submission. The PTA drafter should skip to the next page and continue.] _ 


_PIA is required by the E-Government Act. 

_ PIA is to be completed as a matter of PBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? __Yes. _No (indicate reason): 


PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate P1J. 

System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

2_Information in the system relates to internal government operations. 

__ System has been previously assessed under an evaluation similar to a PIA, 

_No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 


Applicable SORN(s):... . .~-__—_ 

Notify FBI RMD/RIDS per MIOG 190.2.3?_No _Yes-See sample EG on PCLlJ intranet website here: 

lntp://bome/DO/OGC/LTB/PCLtJ/1 > rivacyCivi]%20Ltberties%20Library/formforjTuogl90-2-3_ec.wpd 

SORN/SORN revisioh(s) required? No_Yes (indicate revisions needed): 

Prepare/revise/add Privacy Act (e)(3) statements for related forms? _JNb _Yes (indicate forms affected): 


RECORDS, The program should consult with RMD to identify/resolve any Federal records/electronic records issues, 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary'. RMD can provide advice on this 
as well as on c o mpliance with requirements for Electronic Recordkeeping Certification and any necessary updates. 
Other: 


Elizabeth Withneil, Unit Chief 

Privacy and Civil Liberties Unit 

Date Signed: . 

JUimestr.'Tandon, Deputy General Counsel 

FBI Privacy and Civil Liberties Officer 

Signature: 

Date Signed: 

PCAU $LoU $ q / / 

~ ? ' • / INI'in 
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L INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/projcct 
and how it will be used; (e) who will have access to the information in the 
svstem/projcct; (f) and the manner of transmission to ail users. (This kind of 
information may be available in the System Security Plan, if available, or from a Concept 
of Operations document, and can be cut and pasted here.): 


b7E 


in March 2012, the FBI's Information and Technology Branch (IT8) - IT Engineering 
Division (iTED) published its new ST Services Strategy wherein the STB announced its 
■ initiat i ve to ad o pt a services-based strategy for delivering and manag in g IT investments. 


Pursuant to the IT Services Strategy, and desiring to assert more effective control of its 
resources, the FBI has identified the need to consolidate their SQL Server deployments. 

[ — — - — ■ ■ ■ ' ' — | b7E 


| I will operate from the DAVE environment (Virtualized) further minimizing the 

server hardware footprint. Please see the attached system design layout beiow. This 
design allows the rapid expansion of services if additional services are needed that 
surpass the initial work load capacity of the server. 

I ~| mav host various databases for enterprise applications. I l itself b7E 

does not contain, maintain or disseminate personally identifiable information (Pi!). As 
applications request SQL database support, appropriate privacy documentation will be 
completed that will address the specific needs of the requesting application. 

I "[ provides database services as a service. Databases are accessed via_ 

dedicated communication mechanism engaged by the front end application.|_| 

responds to data queries presented by the applicatio n software. A s user interacts with 
the front end application directly and does not acces. j I Database 
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administ rators are cl eared personnel that may have access to the databases that may 
reside in i I The access is controlled via the Active Directory team of the 

Enterprise, Strict database segregation between applications will be enforced via Active 
Directory group policies and the appropriate database design implementation. 


UNCLASSIFIED//! 





UNCLASSIFIED//! 


2. Does the system/project collect, maintain, or disseminate any information about 
individuals (i.e,, a human being or natural person, regardless of nationality)? 

__X_NO |If no, STOP. The PTA is now complete and after division approval(s) 

should be submitted to FBI OGC/PCLU for final FBI approval. Unless you are 
otherwise advised, no PIA is required.] 


______ YES [If yes, please continue.] 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Cheek all that apply.) 

The information directly identifies specific individuals. 


b7E 


b7E 
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The information is intended to he used, in conjunction with other data elements, 
to indirectly identify specific individuals. 

_The information can be used to distinguish or trace an individual’s identity (Le., it 

is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4. 

None of the above. If none of the above, describe why the information does not 
identify specific individuals either directly or indirectly, f If you cheeked this item, 
STOP here after providing the requested description.] 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 


NO _YES 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO. [If no, skip to question 7,] 

__YES. flf yes, proceed to the next question.] 

6 . Does the system/prbject collect any information directly from: the person who is the 
subj ect of the information? 

_NO (If no, proceed to question 7.] 


a, Does the system/project support criminal, CT f or FCI investigations or 
assessments? 


___NQ 

YES [If yes, proceed to question 7.j 

b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 
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the necessary forra(s)»I 

YES Identify any forms, paper or electronic, used to request such 
information from the information subject: 

7, Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

NO _____ YES If yes, check all that apply: 


_SSNs are necessary to establish/confirro the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 


_SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

_ SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

__ jt is not feasible for the system/prcyect to provide special protection to 
SSNs. Explain: 

8. Is the system operated by a contractor? 

_No. 

_Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PH and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

_NO If no, indicate reason; if C&A is pending, provide anticipated 

completion date: 

_YES If yes, please indicate the following, if known: 
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Provide date of last C&A eertifieation/re-eertffieatioiK 

Confidentiality:_Low_M Oder ate_High_Undefined 

Integrity: _Low Moderate High Undefined 

Availability: _Low Moderate High Undefined 

Not applicable - this system is only paper-based. 
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10. Does the system conduct data mining as defined in Section 804 of the 

Implementing Recommendations of the 9/11 Commission Act of 2007, F.L. 110- 
53 (codified at 42 USC 2000ee-3)? 

NO 


__ YES O' yes, please describe f he data mining function: 

11, Is this a national security system (as determined by the SeeD)? 

_NO _YES 

12, Status of System/ Project: 

_ This is a new system/ project in development, [If yon checked this block, 

STOP. The PTA is now complete and after division approval(s) should be 
submitted to FBI OGC/PCLT for final FBI approval and determination if 
PI A and/or of tier actions are required.) 


■IL EXISTING SYSTEMS / PROJECTS 
j, When was the system/project developed? 

2 , Has the system/project undergone any significant changes since April 17,2003? 
__NO [If no j proceed to next question (113),) 


YES If yes, indicate vvhich of the folio wing chaiiges were involved (mark all 
changes that apply, and provide brief explanation for each marked change): 

__ A conversion from paper-based records to an electronic system, 

A change from information in a format that is anonymous or non- 
id en titrable to a format (hat is identifiable to particular individuals. 

A new use of an IT system/project, including application of a new 
technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

__ A change that results in information in identifiable form being 
merged, centralized, or matched with other databases. 
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A new method of authenticating the use of and access to 
information in identifiable form by members of the public. 

A systematic incorporation of databases of information in 
identifiable form purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that results in 
new uses.or exchanges of information in identifiable form. 

A change that results in a new use or disclosure of information in 
identifiable form. 

A change that results in new items of information in identifiable 
form being added into the system/project. 

Changes do not involve a change in the type of records maintained, 
the individuals on whom records are maintained, or foe use or 
dissemination of information from the system/project. 

Other (Provide brief explanation): 

3. Does a PI A for this system/project; already exist? 

_NO __YES 


if yes: 


a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since foe Pf A? 

_NO _.YES 

(The FT A is now complete and after division approval^) should be submitted to 
FBI 0GC/PCLU for final FBI approval and determination if PIA and/or other 
actions are required.] 
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(OGC/PCLU Rev. 04/01/2011) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) INSTRUCTIONS 

What is a Privacy Threshold Analysis (PTA)? A PTA is designed to assess and 
document whether a Privacy Impact Assessment (PIA), a Privacy Act system of records 
notice (SORN), and/or other privacy-related documents are required. 

When should a PTA be completed? A P TA should be completed at the beginning of 
any information system’s/project's development, including system testing or pilot 
projects. Additionally, a PTA should be completed whenever there is a significant 
system/project change to determine whether there are any privacy issues as a result of 
such a change* 

A current PTA (and PIA if Indicated by the PTA) is required for: 

- A security certification and accreditation (C&A) of an IT system; 

- An OMB-300 budget submission involving an IT system; 

~ IT life cycle milestones beyond system concep t and prio r to any solicitations or 
expenditures involving project funds (i.e., before j I 

r Acquisition Review Board (ARB) consideration, or applications for external 
funding/grants; 

- Significant changes in FBI SORNs; 

- Reportable data mining systems or projects; and 

- Submissions to OMB for Paperwork Reduction Act approval of nan-investigative IT 
forms, questionnaires, or surveys involving personally identifiable information (PII) 
posed to 10 or more persons or entities (other than current FBI employees, detailees, 
assignees, contractors)* 

When is a PTA current? A PTA may be considered current when the PTA is less than 3 
years old with no subsequent changes involving significant new privacy risks. 

Who should prepare/approve the PTA? 

Preparation/coordination/intermediate approval: A PTA should be 
prepared/approved by the program management and Division Privacy Officer, in collaboration 
with IT, security, and end-user management. If the subject of a PTA is under the program 
cognizance of an FBIHQ Division, prior to forwarding to OGC the PTA/PIA must also be 
referred to the FBIHQ Di vision for program review and approval, if required by the FBIHQ 
Division. PTAs relating to forms/questionnaires/surveys implicating the Paperwork 
Reduction Act should also be coordinated with the RMD Forms Desk. Until such time as 
electronic formats and signatures may be authorized for record copies, all PTAs should be 
submitted in both hard copy and electronic formats. Preparers/reviewers are encouraged to 
coordinate with FBI OGC/PCLU for guidance and assistance during this process. 

Final FBI approval: Following divisional approvals), forward the PTA to FBI 
OQC's PCLU for staffing for final determination/approval by the FBI Privacy and Civil 
Liberties Officer (PCI..O). Electronic copies of any system security plan (SSP) or other 
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materials explaining the system should be forwarded with the PTA. PCLU staffing will 
include a thorough review and any appropriate follow-up, and may include returning a 
submission to the division for revision. PTA processing is complete upon final approval by 
the FBI POLO. GGC/PCLU will file the signed final PTA in OGC's P1A control file and 
provide copies to FBI stakeholders for filing and retention in pertinent files. 

How should the terms “PIP and “identifiable form” be interpreted? 

In this PTA, “PIP means: information which can be used to distinguish or trace an 
individual’s identity, such as their name, social security number, biometric records, etc. alone, 
or when combined with other personal or identifying information which is linked or linkable 
to a specific individual, such as date and place of birth, mother’s maiden name, etc. 

In this PTA, “identifiable form” means: any representation of information that 
permits the identity of an individual to whom the information applies to be reasonably 
inferred by either direct or indirect means. 

Section 208 of the E-Government Act of2002, See also M-03-22, OMB Guidance for 
Implementing the Privacy Provisions of the E-Government Act of2002. 

Please complete the FBI PTA form per the specific guidance provided in the questions 
on the form. 

(And please detach these instructions before submitting completed PTA.) 
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1 B! BRf\ U \ i!'R? MiOi 0 V\ U \Mv PI \ 


N AME OF SYSTE M PROJECT; [] 


Derived From: 
C.Rxsi.fk'd By: 
Re-mom 
Deeiasidy Oot 


•<\sh:m project irk 

MB 0«,* Pi LI HR. 

Mame:r 1 

Program Office: ITMS/SDC 




Fbo?ie:[^ 


i Room Number: Module B2 



Program Manager (or emer appropriate 
cseondveas Division dmem-met; 

Psait'!: Priv.tcy Dike! 

Program DodOm; 

Signature; 

Vs ;' , e 

l remand Justice 

flue Spued: 

Date Toned: 

OvlynosiPvV) Servicer 


Name: 


Title: 

Tide: 

FBI HQ Divmiom 

Simiirere: 

Smnotiom: 

Criminal Justice 

Date signed: 

Date slimed. 

h-m:nm;mon Services 

Marne; 

Name: 


Tills: 

Tide: 

After ail dsvksea; approval 
rfh* FBI Privacy and Civil 

Is, lanyard signed Card copy plus ekcirimk e 
Liberties OtiicerN deteonbumons, conditions. a: 

spy io FBIOCC/PCU1 tJOl 7538), 
ad/oi final approval vv; 0 be recorded on :he 




Lpos fund FBI approval, FBI OCC/PCLC vCO dbrnbuie as follows: 


i - Signed original to 

file 190-RQ-C102:792 (feed to JPH LB21R 

via Pa-520) 

Copied uv cask no oil; 

xa.se :k note produce as needed for Pro Drain;i 

Division (iieOT 

l - DOJ Office of Pr: 

ivaey ami Civil liberties (via e-mail to 

1 - OGC\PCLU farranet 

pi; va c y yo sdo;. go v) 


1 - PC Cl; UC 

(if classified, v 

ia hand deli very to 1 TO Perm. Ave. NW. Suite 940, 1 - PCU? Fibiarv 

20530) 

2 - FBI OCR) / OfPP OPR 0376. att.o:| \ 

i - PC!:.!.! Titklr 

I - FBI SecDoAU k! 

ee. eopv; via e-mail to UCl 

j b6 

; - ODD RMAC fat; 

nl 1 

- 1 b7C 


■■ Program Division POC /Privacy OPket 
' MBsHQ D';'v o;ior::. POC /Privacy OPker 
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Pi A A not reg; tired for she fotiowing reasons}; 

System does nos coPect osaintahe or ddoesniiusse FIX 

Syxsesn A grandfathered An existenee before 4/;7/2P03; oo Aver changes posing Agoitxraos privacy nsksy 
iniXrroavion in the vyAon; relatee to haemal government opera hems. 

System has been previously assessed node; ao eaaumtrim similar to a Pi A. 
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hint LM i PKUJfcC. 


Provide a general description of the system or project that includes: m 
'the system/project, in eluding associated acronyms; structure of the 
stem/project, purpose; nature of the information .in the system and how 
HI he used; who will have access to the information in the system ami the 
a oner of transmission to id users. 


ride a general description of the system or prefect that inch 
















NO IThe program will need to work with PCiJj to develop/isnpkment 
the necessary f»rm($}.} 

YES Identify any forms, paper or electronic, used to request such 
information from the information subject: 

?. Bos the system undergone Certinceden X; Accreditation (C&A) by the FBI Security 

_NO if no5. indicate reason; if C&A is pending, provide anticipated 

completion dote: 

_ X.YES If ye s, provide date of last CX A ceitification/re-ecrtifleation: 

| . I aTO d ated 9/3 8/200». C&A completed August 2009, bat 

new A TO has not yet bee n issued J I will he under accreditation boundary of 


$ Is this system/project the suhiee; of an OMBOOO budget submission';- 

.X.NO .Don’t, know YES if yes, please provide 

tin date and name or title of the 
OME submission; 

V. is this a natk;nal seeunty system (as determined by vho SecD:? 

_X.NO ._____ YES .Don"; Know 


x ' ' - - v f > - iinsifonsu 1 * »\ block- 

STOP. The Fit A n now complete and after division appn.mU(.s} should he 
submitted to FBI OFC/hCU, for final FBI approval and determination if 
FI A and/or other actions are required, j 


eoi b-orq 


14-Q6-Q4-FBI-FQIA-2Q15Q417-5th-PrQductiQn 






















fThe FT A is novr complete aod after division approval**',$ slundd be submitted ro 
FBI Oiti ?i'l\ for final FBI approval am! deter min a lion if PL4 and/or other 
ite'dons are reqtb red,] 
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INSERT n,ASS1F!< : -VIION/f:C>^'OlOL -MARKINGS. IF AiririkOPRiATEI 


FINAL FBI APPROVAI. / DETFRMIN ATKINS / CONDITIONS: |TIns section will fee completed by the FBI 
POA7FO.O followi ng PTA submission. The PTA dra f t e r should skip to tfec next page an d continued 

PIA is required by the F-Government Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? Yes. No (indicate reason): 


_PIA is not required for the following reasonss): 

_System does not collect, maintain, or disseminate HI:. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

Information in the system relates to internal government operations. 

.System has been previously assessed under an evaluation similar to a PIA. 

No significant privacy issues (or privacy issues are unchanged}, 

_x_ Other (describe): FLSUR Records System was developed prior to 2003 and the data residing in ERS is 

also located in other systems for which Pi As have been conducted. 


Applicable SORN(s): .JUSTiCE/EBI-OOd (Electronic Surveillance 

Indices) 

Notify FBI R.MD/R1DS per MIOO 190.2.3? .x No .Yes-See sample FC on PCI. U intranet website here; 

lvdp:/d]Grric/DO'O<dC/LTEt/iR'.AU,dridvacyCivilAA0Libe!tiesiR20LIbrary,'fc-!-rnformiogS90--2--3...ee.vvpd 

SORN-'SORN revision(s) required? x No Yes (indicate revisions needed): 


Prepare: revise add Privacy Act (c)(3) statements tot related forms? x No Yes (indicate forms affected): 


RECORDS. The program should consult with RMD to identify.resolve any Federal records electronic records issues. 
The system may contain f ederal records whether or not it contains Privacy Act requests and, in any event, a records 
•schedule approved hv the National Archives and Records Administration is necessary. RMD can provide advice on ibis 
as well as on compliance w hh requirements tor Electronic Rccotdkccping Certification and any necessary updates. 


INNER r n. \fmfh vuun coy iroi MARKINGS, if AIWOPBIAIT; 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT! 


I. Provide a general descriptor of the system or project that Includes; tat name of 
the system/projeek Including associated acronyms; (b) structure of the 
syste.okprojerh .including fuiereontKH'lkms with other projects or systems; (e) 
purpose of the sysiem/projeei; <d) nature of the information In the sysiem/projeet 
jowl how h will t>e used; te) who will have access to the information In the 
systan/p reject; (!) and the manner of transmission to ail users, 

(a) Name of the system: 

Electronic Surveillance (ELSUR) Records System i ERS). 

(b) The system's structure (including eomptmerds/suhsysiems): 


ie) Purpose for coileeting the information and how it will be used: 

Prune'} Puqwo-e. tor mpnreoe b> dse Deehwam to dw Judge (lute III coses)' whether 
use reh e* op > id; widen do Pfd w jeer a,'•hoe enure k core o> * ondnc' eUvnemc 
surveillance has ever been served led before and, if so, when. 

v >Ot\ !v v ' v ' i > . m> ' ^ w,w 'Ww » t re x w,0\ 

(d) Nature of the information in the systern/prqject and how it will be used.: 

V v one s <„ '<!'<■ - ' \ on x v \w e '' o ,<.i>w re •<<> ■> * 

is 1 Si J * V V V W ' i V J \ iw M I do 0 re v ! \ 1 

a court order, 

ELS! R also coma ms foe true nanw or best known name of u'd persona, be releases and 
o e ^ v. \ ,0 h * ^ N ^ N 

V I \ N V s V > i 

AdcUtmualN. I t Nl 'k eooUure rekre hiogmphmai information t Social Seem by Numbers 
SS're News -k renh hOKs, ,00: t Bl Vmfocrs' ot reny ndon oa o wno am m the 
system. Note that] 


v \ v s \ . w ' e ere w n rew' re s 

11ALERT CL.ASS! R< AVnftA'T.ONTRf ;E. =V| A.R RLALLw 
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nss k n r t i, amri-icatioar 'oxs roe mask fngs, 

IF AiURUilEs ESTEI 

(e) Who will have access to the information in the systern/prqiect: 

K I ,v < N U \ K „ \ \ S „ O. 

w ^ M s ' ^ ^ N < a V ! ' \ ' _ <\ 1 . v b7E 

| | assigned to the FILS UR application (around I j in total) have direct access to 

ELSUR, 

v „v \ CCA <\ kCv Cs Cv, tji the O s 

S' A ^ , > \' m u 1 A 1 ' 0 >V n ' sc , ,,, «. 

to some information as provided by a member of one of the two above paragraphs. 

(i) Manner of transmission to all users: 

He, tromc.tA m.H HINot R.pmR n.e. ccp'sctec^ Jam' loaded H 1 t* R' and ps os seed 
to other users. 

2. \N l. V „> i. \ » V ! I ' S 

individuals (he., a human being or natural person, regardless of nationality /? 

.NO | If no, STOP. The FT A is now complete and -after tils is km approval(s) 

should be submitted to FBI OGC'/PCXF for final FBI approval. Unless you are 
otherwise advisee!, no PI A is required,] 

X YES (If yes, please continue.) 

3. a v \ \ V v o s' 

system about individuals: Bear in mind that log-on information may identify or be 
!u,\..Ph- h' .ss' 'subs 'duel 

(Check all that apply, s 

.X.The information directly identifies specific individuals, 

.XI.The information is intended to be used, in conjunction with other data elements, 

to id . Ct\ AC' 'A \pvAif, O, ', SOUS N 

_X A O < V < >«. wo o < I" , \ o, v , 

Is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4, 


UN AA'p T fFARSinCATlOiVC tASTROL Al aE RINAS, 
IF AIRUUUUFI ATE: 
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None of the above. If none of the above, describe why the information does not 
identify specific individuals either directly or indirectly, \ If yon checked tins item, 
STOP here after providing the requested description.] 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

.X.NO .YES 


5, Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

NO. fM' no, skip to question 7,) 

.X YES, {If yes, proceed to the next question*! 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

_NO Ilf no, proceed to question 7,f 

.X.YES 


a. Does the sysictn/projoet support criminal, CT, or FC! investigations or 
assessments? 

_NO 

X YES \ If yes, proceed to question ?,| 


b„ Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

NO | The program will need to work with PCI U to deveiop/impiemcot 
the necessary form(s).j 

.YES Identify any forms, paper or electronic, used to request such 

Information from the information subject: 

Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
sy stem pro v\.t ? Full SSNs s u t d only be t ss d ts de v file - n im ted , st -mces 


iankiu Yi.\KMl it \tfivs ruMitoi \i ysKtwy 
if Yi'fiObbiAi'n 
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flN vEkT O AnS ltdC''.AT t O NA'<>N : ROL Xf AtTlNNNS, 
IF APPRO PR i AT??; i 

NO .X.Y£S If yi^is, cheek all find apply: 


X SSNs are necessary to esumhslvcontlnn the identity of subjects, victims, 

! s r * ^ C "vi , t v v 


SSNs are necessary to identify FBI personnel in this internal admi.rhst.ra.iive 

system, 

o'n\' . a- 'aut o.bc ev'\' Ne-ondv; 

The systenvproject provides special protection to SSNs (e.g., SSNs are 
, o,u \ ytOxh Nodee hoot ah s." "m ut e ,a k V \U'N\ o<- m \ ,w Ihab 0 to " St 5 n 
users). Describe: 

X it is not feasible for the sysfem/prqieci to provide special protection to 
w 1 \p an N oo,'\ v. o .v ^ , o ^ v«, i 

necessary to identify the individuals or may he collected as part of the surveillance. 

8. Ls the system operated by a contractor? 

No. 


.X h , ^ , a ' e' ' v . ,c " a'v o \ the S' < , v 

considered Privacy Act systems of records. The Federal Acquisition Regulation 

1 nn ,, u< v v « -v v , ' \ s Ni o*. o'v 

collects, maintains or disseminates PH and additional requirements may be 

> V O V m v N ' i S ' s s O * s ' ' ' 

O OvV > ' V v > V 

system for the FBI. 

Has the system undergone Certification & Accreditation (C&A) by the FBI 
m eas o \ 'V s >:hSa 1B' 

NO If no, Indicate reason; if C&A Is pentilng, provide anticipated 
completion date: 

X YES If yes, please indicate the following, if known: 

Provide date of Iasi. C&A ce.rtifi.cation/re-eeriltleathnu Feb, 

2009 

According to the IMA SSP v2-l 2012TN-O9: 
f onfldenriahty:.Low.Moderate X High.Undefined 


f A NE lit C I,,% ini FI f All ON A :<> N TIK n , M A NN1 A€F, 
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1 1 NS a RT O. A SSIAI LA I lON/COM'RO I. M A RK IN GS, 
l¥ A A PM O PRINT IN 

integrity: _Low Moderate JXJtfigh I lode&md 

Availability: _Low Moderate _XJfigh V mtefmed 

Not applicable •••• this system is only paper-based 
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NSFRT CL ASSIF i € A El ONVC C>NT 00 I, MAR OI NOS. 
IE NiOSON 00.0 011 


H). Does the system conduct data mis ting as denned in Section 804 of the 

V v > X <v C'\ il\ i\° ( ' s u o ' 

N v» V ' V W \ ' ' 

.X NO 

YES If yes, please describe the data mining function: 
ill. - - ' ' -vsm' sv\ .v tv ' 

.X NO .YES 


12. Sv - "Nv" X \v 

This is a new system/ project in development, iff y©« checked this block, 
STOP.. The PTA is now complete and after division approvalls) shookl be 
submitted to FBI OGC/PCLU for final FBI approval and determination if 
PIA and/or other actions are ret|«ired.| 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

N N v . v '' ' 

2, 1 N . V ' \.0‘' ' 1 v . d 'O' O' g ' f v' ' «. ' ' gC' ' "v \ ‘ ' 

i NO [lEno. proceed to .next question (El Jfj 


X x < ' v ' „ v xv , N n »v ' ^ v v\sov w ' .Cv (mark ail 

changes that apply, and provide brief explanation for each marked change); 

'5 V V it "> v vv ‘ ! v ' <- ' V O V ' S V 

A change from information in a format that is anonymous or non- 
identifiable to a. format, that is identifiable to particular individuals. 

A new use of an IT system/projeog Including application of a new 

' O * v*' \s n Ui V ' _ 0 v< V 

-.I or example. .t change th uonU o'e.ne a more open unxnvon.cm .n d or 
avenue for exposure of data that previously did not exist.) 
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:i anert chAmmcw nox/cox tihc. m,%rk\s(;s, 
n : .\vmormxnn 

' S ! V ' O' S U' ' 

'0 co' v\ ‘ o ’ o k 'oo v i' o 'o ' ''Os 

A new method of authenticating the use of and access to 
'uV'o s’ on m vk'K'dd , 'A- mooes i'kmK>* o*'fv cad m 

' 'V ' S \0 'v ) S S 'v. ' s' * 

^ 1 ’ ' 0 " l '0. ' ' ' S ' u“ \ S "\ OS 

X 'Os' 'Os' 's x * s') 00 <■ ' S v ^ s \ 

» on two m o\o t oooo m' mreinuoon o' mommukc fooa 

x < "* ' v. a a < Os'' <so s S) O' s o t i 1 ' o'* 

identifiable form 

.X. x ^ > , V'fn)' O' 'O' s ' s\ (Is sl»'«. * 

form being added into the system/pngeet. 

SSNs, Dates of Birth | [and FBI Numbers were linked to 

individual nante d l at the request of 

the sponsor (RMD). 

Changes do not involve a change in the type of records maintained, 
! x s s on whom records are manna mod, so us <» 
dissemination of m to rotation bom the systeneprrgect. 

Other ^Provide brief explanation j: 

3 . Does a HA tor this system/projcct already exist? 

.NO YES 

If yes: 

a- Provide date/title of the FI.At 

b. Has the system/proieet undergone any significant changes since the PIA? 

.NO .YES 

IThe FT A is now complete ami after division approvals) should he submitted to 
FBI OGC/PCLU for final FBI approval and determination if PI A and/or other 
.actions are required.) 


1 1 Xof:RT CLASSif 1CATiON/CONTROt XIAlYCIACa 
if APPROPRIaTF.I 

epic.org 14-06-04-FBI-FOIA-20150417-5th-Production 


EPIC-1259 

















(0GC7PCLU (Rev. 04/01/2011) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM / PROJECT: Employee Skills Profile 
BIKE FBI Unique Asset IB: ______ 


b6 

b7C 


Derived Prom: N/A 

SYSTEM/PROJECT POC 

FBI OGC/PCLO POC 

Classified Rv; N/A 

Name] j 

Name: 

Reason: N/A 

Program Office: Workforce Planning 

Phone: 

Reclassify On: N/A 

Unit 

Division: Human Resources 

Phone] i 

Room Number: TEH 10373 

Room Number: 


FBI DIVISION INTERM EDIATE APPROVALS [complete as necessary consonant with Division policy] 



Program Manager (or other appropriate 
executive as Division determines) 

Division Privacy Officer 

Program Division: 

Human Resources 

Signature^ ! 

Signature] j 

Date signed: ov,o? /^.a ?a 

Name:|__ 1 

Title: Supervisory Mgmt. & Program 

Analyst 

Date ssgned:fi i tA i x*>\ 7. 

Name:] j 

Title: Supervisory Mgmt. & Program 

Analyst 

F8IHQ Division: 

Human Resources 

Signature.] | 

Signature] | 

Date signed': O f i \/ 5 <- 

Name:!---1 

Name] | 

Title: Supervisory'Mgmt. & Program 

Analyst 

Title; Supervisory Mgmt. & Program 

Analyst 


After all dh seisin approvals* forward signed Ssmrd ropy pins elect oaofo copy t« FBI OGC/Pt'i.l pIF.H 73501. 

( The I Hi Privacy and t ivil 1 iberties Officer's determinations;, conditions, and 1 1 final ap > ova wi 1 be recorded on the 
following page.) 
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1IN8ERT Cl.,AESIFI€ATIO^/€ONTROl, MARKINGS* IF APPROPRIATE! 

FINAL FBI .APPROVAL / DETERMINATIONS / CONDITIONS:__ 


_____ PiA is required by fee E-Govemment Act. 

_XX_PIA is to be completed as a matter of FBI/DGJ discretion. 

Is PIA to be published on FBi.GOV (after any RMD FOIA redactions)?_Yes. _No (indicate reason): 

_PiA is not required tor fee following reason(s): 

__ System does not collect, maintain, or disseminate Pil. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

.Other (describe): 

As a matter of policy, it would be a good idea to complete a PIA for this system, but in lieu of that, HRD 
should post this on its we b site so employees are aware of the system and its uses. 


Justiee/FSi-002 to the extent information will be maintained in a personnel file; 


Applicable SORN(s): 

Justice/FBI -008, BPMS 

Notify FBI RMD/fUDS per MJOG 190.2.3? _ No XX__Yes~See sample EC on PCLU intranet website here: 
http://home/DO/OGC/LTB/PCLU/PrivaeyCivif%20Liberties%20Ubrar>7fomt_for_miogl90-2-3_ec.wpd 


SORN/SORN revision(s) required? _X_No 


__Yes (Indicate revisions needed ); 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? 


No _ XX_ Yes s' indicate forms affected): 


RECORDS. The program should consult with RMD to identify/resoive any Federal records/electronic records Issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 
as well as on compliance wife requirements for Electronic Recordkeeping Certification and any necessary updates. 


MtkHi 




Deputy General Counsel 

F8f Privacy and Civil Liberties Officer 


INSERT CIASSIFICATION/CONl'ROI, MARKINGS, IF APPROPRIATE) 
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{INSER T CLASH!F!C AT!0N/€'0NTR0L M VRKINOS, 

wAwmomuJEi 

L INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (h) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to all users. 

(a) Employee Skills Profile (ESP) 

{b} ESP is a database that will be housed on the Compass/Resource Allocation Planning 
(RAP) Tool platform on the FBI intranet. 

(c) ESP will capture the skills, education, and certifications of the FBI workforce. This 
skills database will allow the Workforce Planning Unit (WPU) to analyze the gaps 
between the current and desired skills for workforce as well as develop 
recommendations to close any identified gaps. 

(d) ESP will ask employees to select their skills from a list and then provide their 
proficiency level, the year the skill was last used, and where they obtained the skill 
(e.g. Federal Government, state/local government, private industry}. The data will 
be used as described in part {c) above. 

fe} WPU will have access to the data for purposes describe above. WPU would likely 
show specific skill information to managers with critical skill needs or cumulative 
data to executive management to show gaps in critical skill areas. Additionally, 

| | so this information may be b 7 E 

shared with them to minimize administrative burden on FBI employees. 

Furthermore, the data could potentially be used, in an aggregated form, to answer 
Congressional queries, GAO audits, etc. 

(f) ESP will be housed on the FBI intranet and will be delivered to all employees through 
the intranet. WPU will act as administrators for ESP, and will generate and provide 
reports as describe in part (e) above, 

2. Does the system/project collect, maintain, or disseminate any information about 
individuals (i.e.. a human being or natural person, regardless of nationality)? 

__NO [If no, STOP. The FT A k now complete and after division approvaltst 

should bo submitted to FBI 0€iC7FO.,U for final FBI approval, I aim yo« are 
otherwise advised, »o PI A Is required,| 

X YES [If yes, please continue.] 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information nitty identify or be 
linkable to an individual. 

(Check ail that apply.) 
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IINSFRT c:la^sificahonk:onteol markings, 

IF AFPE0FRIATEI 

X _The information directly identifies specific individuals. 

X The information is intended to be used, in conjunction with other data elements, 
to indirectly identify specific individuals. 

_X The information can be used to distinguish or trace an individual's identity (i.e., it 

is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4. 

None of the above. If none of the above, describe why the information does not 
identify specific individuals either directly or indirectly. |If von checked this item, 
STOP here after providing the requested description.] 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 


_NO _X_YES 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO. [If no, skip to question 7,] 

X YES. [If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

_NO [If no, proceed to question 7,] 

X YES 


a. Does the system/project support criminal, CT, or FCI investigations or 

assessments? 

_NO 

X YES [If yes, proceed to question 7.] 


b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on foe collection form or via a 
separate notice)? 


epic.org 


flMSEET CLASSIFICATION/CONTROL MARKINGS, 

14-06-04l^lMW-Rltli^MIM|juction 


EPIC-1365 












ff NSER? CLA8SIEI€A110NR:ONTM>L MARKINGS, 
IF APPROPRIATE! 


.NO |The program will need to work with PCLU to develop/tjmplement 

the necessary' form(s).j 

X YES Identify any forms, paper or electronic, used to request such 
information from the information subject: A privacy statement 
wit! appear on-screen when a user accesses ESP. This statement is 
being developed by the Privacy and Civil Liberties Unit in 06C. 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/projeet? Full SSNs should only be used as identifiers in limited instances. 

_ X NO . YES If yes, check all that apply: 


_SSNs are necessary to establish/confirm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 


_SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g„ SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

_It is not feasible for the system/project to provide special protection to 

SSNs. Explain: 

8. Is the system operated by a contractor? 

..X.No. 

_Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates Pi t and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 
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|1V4R» t t \MO\ t OMEOl MWkAMvV 

IF AFFEOrElAl'EI 

X NO If 00 , indicate reason; if C&A is pending, provide anticipated 
completion date: The Compass/RAP platform has already 
received C&A and this add-on does not meet the threshold for 
additional C&A review. 

_YES If yes, please indicate the following, if known: 

Provide date of last C&A certification7re~certification: 

Confidentiality:_Low_Moderate_High_Undefined 

Integrity': _Low Moderate High Undefined 

Availability': _Low Moderate High Undefined 

_Not applicable ~ this system is only paper-based. 

10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 110- 
53 (codified at 42 USC 2000ee-3)? 

X NO 

_..YES If yes, please describe the data mining function: 

11. Is this a national security system (as determined by the SecD)? 

X NO ..YES 

12. Status of System/ Project: 

X This is a new system/ project in development. (If you cheeked this block, 
STOP. The FT A is non complete and after division approvals) should he 
submitted to FBI 0GC/PCL1J for final FBI approval and determination if 
PI A and/or other actions are required. 1 

II. EXISTING SYSTEMS / PROJECTS 
3i When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17, 2003? 

__ NO [If no, proceed to next question (11.3). ] 
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[INSERT CLASSIEICATION/CONTRCM, MARKINGS, 

IF APPROPRIATE! 

YES If yes, indicate which of the following changes were involved (mark all 
changes that apply, and provide brief explanation for each marked change): 

A conversion from paper-based records to an electronic system. 

A change from information in a format that is anonymous or non- 
identifiable to a format that is identifiable to particular individuals. 

_____ A new use of an IT system/project, including application of a new 
technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

A change that results in information in identifiable form being 
merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources, 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_ A change that results-in a new use or disclosure of information in 

idcritiliable form. 

_A change that results in new items of information in identifiable 

form being added into the system/project. 

_____ Changes do not involve a change in the type of records maintained, 
the individuals on whom records axe maintained, or the use or 
dissemination of information from the system/project 

__ Other [Provide brief explanation|: 

3. Does a P1A for this system/project already exist? 

.NO _YES 

If yes: 

a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 
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_NO YES 

IThe FT A k sow mmpkU md offer division approval^) slisaM he submitted to 
FBI OGC/FCLU for Una) FBI approval ond deferssfeoflos if FL4 m#tm oiBer 
oetiom are reqoirdLJ 
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